06-17-2020 12:20 AM - edited 06-17-2020 09:18 PM
Good day!
Replacing the old cisco 2901 with the new isr 4351. After the replacement, there was a problem. Traffic to the test host goes well over http and partially over https. Some users can get access over https and some can't. When checking with curl it freezes in the phase
```
* TCP_NODELAY set
* Connected to ######test_servise####### (#####white ip######) port 443 (#0)
* Cipher selection: ALL:!EXPORT:!EXPORT40:!EXPORT56:!aNULL:!LOW:!RC4:@STRENGTH
* successfully set certificate verify locations:
* CAfile: /etc/pki/tls/certs/ca-bundle.crt
CApath: none
* TLSv1.2 (OUT), TLS handshake, Client hello (1):
```
ios-xe 16.06.4
Added ip adjust-mss 1452 to the Internet interface and everything worked!
Solved! Go to Solution.
06-17-2020 09:19 PM
06-17-2020 09:19 PM
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide